Showboat Malware Targets Telecoms with Stealth Techniques

Showboat is a modular Linux post-exploitation framework attributed to Chinese actors that has targeted Middle Eastern telecom companies since mid-2022. It employs advanced stealth techniques—such as retrieving C source from Pastebin and compiling it at runtime—and remained undetected by antivirus engines until detection in April 2026, posing a significant risk to critical communications infrastructure.